67 commits

Author	SHA1	Message	Date
Sophie Schiller	59cd441292	open firewall to rechenmonster for fossgis releasing	2022-03-11 16:39:46 +01:00
Sophie Schiller	8a2ee1bd00	open firewall to rechenmonster for fossgis releasing	2022-03-10 18:20:56 +01:00
Sophie Schiller	6c6066d93a	open firewall to rechenmonster for fossgis releasing	2022-03-09 20:31:13 +01:00
Sophie Schiller	4458afe654	open firewall to rechenmonster for fossgis releasing	2022-03-08 15:06:42 +01:00
Franziska Kunsmann	0d865c93d4	bundles/cron: use MAILTO=, rework metadata syntax	2022-02-05 11:41:41 +01:00
Franziska Kunsmann	2b06c77439	bundles/pppd: allow dynamic configuration of nftables rules	2021-12-14 16:18:11 +01:00
Franziska Kunsmann	0101e0c92d	bundles/nftables: store rules in dedicated files instead of nftables.conf	2021-12-14 15:27:30 +01:00
Franziska Kunsmann	74f5b25f0d	various fixes, remove some TODOs	2021-11-27 10:40:20 +01:00
Franziska Kunsmann	f02088d9fe	nodes/home.router: enable wg_health_check	2021-10-14 09:02:29 +02:00
Franziska Kunsmann	b7482008df	home.router: add hosts entry for wireguard box	2021-09-30 06:48:22 +02:00
Franziska Kunsmann	13057d6f76	home.router: remove openvpn client	2021-09-29 20:36:34 +02:00
Franziska Kunsmann	89f91f3857	nodes: add bird to wireguard nodes	2021-09-29 19:47:14 +02:00
Franziska Kunsmann	ece7b343f9	nodes/home.router: disable sms alerts for now	2021-08-22 07:14:47 +02:00
Franziska Kunsmann	bd10dc578f	bundles/pppd: refactor check_dyndns_update ... We don't care about what the DNS provider said when updating the ip address. The only thing we care about is wether the current external ip of the system matches the resolved ip address.	2021-08-14 08:00:43 +02:00
Franziska Kunsmann	77f785135d	groups/home: add icinga host dependencies	2021-07-17 09:21:43 +02:00
Franziska Kunsmann	72d4826dbb	remove bundle:netdata - we have telegraf and grafana now	2021-06-05 13:28:25 +02:00
Franziska Kunsmann	95856a2c2d	add bundle:sysctl	2021-06-04 07:28:26 +02:00
Franziska Kunsmann	d569b00960	modify nodes and bundles for new nftables syntax	2021-06-03 13:59:36 +02:00
Franziska Kunsmann	a6434bd8d0	create dedicated user for kunsi work laptop	2021-06-01 16:55:16 +02:00
Franziska Kunsmann	d51cded72d	nodes/home.router: use debian buster nginx repo for now	2021-05-15 06:58:42 +02:00
Franziska Kunsmann	a8e07c62c3	nodes/home.router: add ssl to vnstat nginx vhost	2021-04-25 09:10:05 +02:00
Franziska Kunsmann	1360a36a95	nodes/home.router: poll switch and usv more often	2021-04-24 14:58:09 +02:00
Franziska Kunsmann	e5c49ab172	nodes/home.router: add snmp plugin to telegraf	2021-04-24 14:32:27 +02:00
Franziska Kunsmann	24362768fb	bundles/dhcpd: rework metadata	2021-04-20 18:18:17 +02:00
Franziska Kunsmann	4973c63e62	bundles/icinga2: remove icinga_options/downtime_also_for, add host dependencies via icinga_options/also_affected_by	2021-04-17 09:21:51 +02:00
Franziska Kunsmann	ac58f2a10c	nodes/home.router: fix dhcp config for dmz	2021-04-10 12:09:24 +02:00
Franziska Kunsmann	3a7d612c7a	nodes/home.router: update to bullseye	2021-04-10 09:20:34 +02:00
Franziska Kunsmann	68b8cf28d3	nodes/home.{nas,router}: fix firewall for netdata and nginx	2021-04-04 11:30:50 +02:00
Franziska Kunsmann	6e423c24fb	bundles/wireguard: rework metadata.py	2021-04-01 16:27:31 +02:00
Franziska Kunsmann	087bc4c669	nodes: iptables for all	2021-03-21 11:44:52 +01:00
Franziska Kunsmann	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franziska Kunsmann	9e1685531c	nodes/home.router: add iptables rule for mail	2021-03-15 11:48:35 +01:00
Franziska Kunsmann	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franziska Kunsmann	f6ecf2a465	bundles/nfs-client: support arch linux	2021-03-11 15:24:06 +01:00
Franziska Kunsmann	f57681b098	nodes: move wireguard stuff to 172.19.136.0/25	2021-03-07 14:39:04 +01:00
Franziska Kunsmann	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franziska Kunsmann	56ff2a794f	nodes/home.router: enable sms notifications for monitoring	2021-02-19 14:46:29 +01:00
Franziska Kunsmann	debabe85b0	nodes/home.router: add dhcp and ipv6 to DMZ	2021-02-19 12:02:46 +00:00
Franziska Kunsmann	5c1eba0d58	bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()	2021-02-15 14:16:35 +01:00
Franziska Kunsmann	6527c985a7	nodes/home.router: add wg0 to allowed interfaces for netdata and nginx	2021-02-14 21:42:50 +01:00
Franziska Kunsmann	ed325848ab	nodes/home.router: refine forwarding rules for enp1s0.23	2020-12-31 22:30:10 +01:00
Franziska Kunsmann	1a9fadce70	nodes/home.router: allow ICMP and SSH via IPv6 to all hosts behind this router	2020-12-31 21:28:15 +01:00
Franziska Kunsmann	da4b139095	bundles/{radvd,wide-dhcp6c}: remove metadata key integrate-with-pppd	2020-12-18 16:30:17 +01:00
Franziska Kunsmann	3eeb253e55	bundles/unbound: introduce, add to nodes	2020-12-13 14:59:44 +01:00
Franziska Kunsmann	2c062761e3	nodes/home.router: add work ssh keys	2020-12-12 09:12:26 +01:00
Franziska Kunsmann	41ff060e99	nodes/home.router: fix restart_pppd cronjob	2020-12-12 09:12:05 +01:00
Franziska Kunsmann	bd217f0666	bundles/pppd: automatically restart pppoe (once per hour) if no public ip address can be found	2020-12-10 16:14:17 +01:00
Franziska Kunsmann	b80c0b12fe	home.router: add c3voc vpn	2020-12-08 17:45:30 +01:00
Franziska Kunsmann	8a1a1bd8fd	home.router: sort metadata	2020-12-06 19:52:32 +01:00
Franziska Kunsmann	58ca3fa9ae	bundles/wireguard: add netdev and network files, add iptables rules	2020-11-21 15:38:38 +01:00